CVE-2020-5333CWE-285

RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API

Medium · published May 4, 2020

CVSS v3.0
4.3
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to view unauthorized information.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00795 · 56.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2020-05-04T18:50Z
EPSS history
Timeline
  • 04 MAY 18:50Z
    RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API
    cvelistv5